Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
File:                     QNiN23rtct6j_41pztZTGlJ5Sqc.mft (raw, json)
Hash identifier:          QpAsljkcU5GneUwp5q6TD1PK+vqL0sayQy3U3jFK2AU=
Subject key identifier:   4E:DF:38:17:3D:98:52:A3:0E:2E:7F:53:A3:EA:2D:3A:12:FF:1A:1E
Authority key identifier: 40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7
Certificate issuer:       /CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
Certificate serial:       01962DF3A3D0067D7BC6C544805EA8690551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft
Manifest number:          10A0
Signing time:             Sun 13 Apr 2025 07:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:03 +0000
Files and hashes:         1: NNmIvWC2aG45EdXCFQyfOgMs8UM.roa (hash: dgfGD7cFEmQYML/LCfaIOvrAjQWUEzucY+z8ExOp2jM=)
                          2: QNiN23rtct6j_41pztZTGlJ5Sqc.crl (hash: dBfoh5O4L1P929iPHQl71lYdmILKhcigprQLLsjgzI4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a3:d0:06:7d:7b:c6:c5:44:80:5e:a8:69:05:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d88ddb7aed72dea3ff8d69ced6531a52794aa7
        Validity
            Not Before: Apr 13 07:01:03 2025 GMT
            Not After : Apr 14 07:01:03 2025 GMT
        Subject: CN=4edf38173d9852a30e2e7f53a3ea2d3a12ff1a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a3:8a:b0:dc:35:1b:ea:58:85:49:cf:bb:34:
                    cc:cf:89:78:c5:ba:79:14:c3:b5:17:48:8c:cf:49:
                    33:e2:43:c1:3e:50:4a:d0:a9:0d:6b:a9:20:a7:09:
                    d8:df:19:33:5f:59:b5:b2:60:0c:4e:c0:dc:ba:ba:
                    90:f4:0d:9e:fb:41:9e:b7:39:26:22:1e:5e:18:21:
                    c4:8a:39:f3:7f:b0:7c:af:84:f7:32:14:e5:7c:ca:
                    08:f1:c6:ee:f0:59:57:22:a6:a4:0f:36:d7:2b:93:
                    a0:ad:e3:59:61:7a:30:29:bc:6e:50:fc:40:e3:ae:
                    4a:e6:8a:bb:9e:50:33:40:7e:d0:3b:95:f0:4a:09:
                    ca:9d:84:fd:54:3e:28:15:29:f0:f5:55:8c:23:67:
                    fb:90:c6:8b:92:4b:e7:cd:91:e7:44:bd:f4:e7:d6:
                    b9:9b:7c:2f:6a:c6:9d:1a:22:f5:56:8f:f7:9e:91:
                    6a:dc:5f:72:01:d4:42:e1:83:1c:21:84:f2:40:e3:
                    aa:6d:14:9a:b1:af:8e:fe:19:c8:8f:89:c9:fc:d5:
                    8e:02:54:19:c6:9f:9d:06:cf:6a:ce:f7:9b:e5:8b:
                    f8:b0:5b:5d:ea:fd:05:e0:58:64:3e:88:b5:79:f4:
                    d5:8a:11:83:8a:ae:6f:b8:26:88:c7:6d:a7:ca:01:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DF:38:17:3D:98:52:A3:0E:2E:7F:53:A3:EA:2D:3A:12:FF:1A:1E
            X509v3 Authority Key Identifier:
                keyid:40:D8:8D:DB:7A:ED:72:DE:A3:FF:8D:69:CE:D6:53:1A:52:79:4A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNiN23rtct6j_41pztZTGlJ5Sqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe45de-b463-443d-b7de-37a24e081f68/1/QNiN23rtct6j_41pztZTGlJ5Sqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:2b:32:c3:5c:ff:93:44:72:ef:eb:cd:5c:3a:4a:cd:67:4b:
         e6:f6:3c:33:40:86:21:f8:b6:a1:38:de:33:09:e1:a0:bf:ba:
         1e:a6:2e:04:b0:43:2d:bf:d0:e3:1e:89:1c:52:07:80:93:43:
         17:f9:73:50:e0:c0:1b:89:96:ca:c6:6f:08:5d:96:95:cb:79:
         4b:d5:ac:eb:a4:4f:a1:e5:59:50:d8:05:d1:a4:d5:57:24:53:
         80:f1:85:0b:e3:bb:d3:c1:f6:9b:0d:cc:bb:c4:bd:6c:d3:d1:
         e3:27:67:6f:d4:2b:24:eb:18:9c:30:dc:d2:04:02:06:83:68:
         53:14:00:11:c3:90:27:19:8f:69:66:a9:62:c4:6c:a6:92:42:
         53:76:e5:62:86:ba:65:57:dc:3f:f4:83:0a:db:28:15:54:0b:
         5c:0f:4c:ad:fa:d8:d0:9e:a7:4d:75:40:74:79:1e:cc:a9:b6:
         17:2e:34:f7:93:85:e7:2c:39:fb:3c:f3:5d:a7:0a:69:fb:63:
         10:aa:8d:b6:82:f3:05:44:59:02:94:7c:35:c2:73:64:a7:95:
         92:0e:6e:8e:7b:46:01:82:e9:fd:3b:01:d6:fa:4d:2e:86:ee:
         2a:c3:fe:88:fd:11:75:90:bb:86:eb:1e:fa:e4:7c:9a:24:e3:
         96:b9:73:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86PQBn17xsVEgF6oaQVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDg4ZGRiN2FlZDcyZGVhM2ZmOGQ2OWNlZDY1MzFhNTI3
OTRhYTcwHhcNMjUwNDEzMDcwMTAzWhcNMjUwNDE0MDcwMTAzWjAzMTEwLwYDVQQD
Eyg0ZWRmMzgxNzNkOTg1MmEzMGUyZTdmNTNhM2VhMmQzYTEyZmYxYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KOKsNw1G+pYhUnPuzTMz4l4xbp5
FMO1F0iMz0kz4kPBPlBK0KkNa6kgpwnY3xkzX1m1smAMTsDcurqQ9A2e+0Getzkm
Ih5eGCHEijnzf7B8r4T3MhTlfMoI8cbu8FlXIqakDzbXK5OgreNZYXowKbxuUPxA
465K5oq7nlAzQH7QO5XwSgnKnYT9VD4oFSnw9VWMI2f7kMaLkkvnzZHnRL3059a5
m3wvasadGiL1Vo/3npFq3F9yAdRC4YMcIYTyQOOqbRSasa+O/hnIj4nJ/NWOAlQZ
xp+dBs9qzveb5Yv4sFtd6v0F4FhkPoi1efTVihGDiq5vuCaIx22nygG1LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7fOBc9mFKjDi5/U6PqLToS/xoeMB8GA1UdIwQY
MBaAFEDYjdt67XLeo/+Nac7WUxpSeUqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUt
MzdhMjRlMDgxZjY4LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTQ1ZGUtYjQ2My00NDNkLWI3ZGUtMzdhMjRlMDgxZjY4
LzEvUU5pTjIzcnRjdDZqXzQxcHp0WlRHbEo1U3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCsyw1z/
k0Ry7+vNXDpKzWdL5vY8M0CGIfi2oTjeMwnhoL+6HqYuBLBDLb/Q4x6JHFIHgJND
F/lzUODAG4mWysZvCF2Wlct5S9Ws66RPoeVZUNgF0aTVVyRTgPGFC+O708H2mw3M
u8S9bNPR4ydnb9QrJOsYnDDc0gQCBoNoUxQAEcOQJxmPaWapYsRsppJCU3blYoa6
ZVfcP/SDCtsoFVQLXA9MrfrY0J6nTXVAdHkezKm2Fy4095OF5yw5+zzzXacKaftj
EKqNtoLzBURZApR8NcJzZKeVkg5ujntGAYLp/TsB1vpNLobuKsP+iP0RdZC7huse
+uR8miTjlrlzag==
-----END CERTIFICATE-----